This IP address has been reported a total of
13
times from
13 distinct
sources.
104.168.47.111 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-31T22:17:44.884263+02:00 dsh1621 sshd[1216280]: Invalid user orangepi from 104.168.47.111 po ...
show more2026-07-31T22:17:44.884263+02:00 dsh1621 sshd[1216280]: Invalid user orangepi from 104.168.47.111 port 46310
2026-07-31T22:17:44.886278+02:00 dsh1621 sshd[1216280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.47.111
2026-07-31T22:17:47.065899+02:00 dsh1621 sshd[1216280]: Failed password for invalid user orangepi from 104.168.47.111 port 46310 ssh2
2026-07-31T22:18:18.615047+02:00 dsh1621 sshd[1216704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.47.111 user=root
2026-07-31T22:18:20.796376+02:00 dsh1621 sshd[1216704]: Failed password for root from 104.168.47.111 port 52370 ssh2
...
show less
2026-08-01T01:28:43.326934+05:30 ittifakordusu sshd-session[179905]: pam_unix(sshd:auth): authentica ...
show more2026-08-01T01:28:43.326934+05:30 ittifakordusu sshd-session[179905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.47.111
2026-08-01T01:28:45.361683+05:30 ittifakordusu sshd-session[179905]: Failed password for invalid user admin from 104.168.47.111 port 45450 ssh2
2026-08-01T01:29:16.991052+05:30 ittifakordusu sshd-session[180414]: Invalid user orangepi from 104.168.47.111 port 51152
...
show less
(sshd) Failed SSH login from 104.168.47.111 (US/United States/104-168-47-111-host.colocrossing.com): ...
show more(sshd) Failed SSH login from 104.168.47.111 (US/United States/104-168-47-111-host.colocrossing.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 31 19:50:20 arachne sshd[6037]: Invalid user admin from 104.168.47.111 port 59974
Jul 31 19:50:50 arachne sshd[6178]: Invalid user orangepi from 104.168.47.111 port 46752
Jul 31 19:54:52 arachne sshd[7271]: Invalid user test from 104.168.47.111 port 41238
Jul 31 19:55:24 arachne sshd[7410]: Invalid user user from 104.168.47.111 port 58262
Jul 31 19:56:29 arachne sshd[7699]: Invalid user admin from 104.168.47.111 port 39366
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-07-31 21:44:30 | LAST=2026-07-31 21:44:30. Last seen 2026-07-31 21:44:30.
show less
Automated report by DataDream Sentinel.
Repeated SSH authentication failures consistent with credent ...
show moreAutomated report by DataDream Sentinel.
Repeated SSH authentication failures consistent with credential brute-force activity were detected against infrastructure monitored by DataDream.
6 failed-authentication event references were correlated between 2026-07-31 19:44:25 and 19:44:28 UTC.
No successful SSH authentication was observed in the available telemetry.
Reference: DD-AIPDB-20260731-AA072FD0
show less
Brute-Force
SSH
Anonymous
denied traffic to a honeypot network. destination port 22.